As I already pointed out to Jerry, I suggest that you place one
Notes-Gateway-Server in your DMZ (third network on a dual-homed gateway)
and configure your firewall in a fashion to accept the Notes-RPCs (Port
1329 or so) from the IP-Adresses of the external servers you want to
connect to.
Then you can have your Notes-Production-Server replicate (Pull-Push from
the Production-Server which means the Gateway-Server is being pulled) data
through your firewall to your Notes-Gateway-Server (you can also have a
separate Modem-Link to the Notes-Gateway-Server) - be sure to implement a
rule for that on your firewall, too. And yes, watch out for
address-spoofing - Checkpoint FireWall-1 can do a neat job on killing
spoofed packets.
As far as scanning of attachments is concerned, GROUP Watchdog as a very
good reputation in Germany - I haven?t used it yet, though:
http://www.group-wp.de/WWW_WP01.NSF/E-WatchDog?OpenView
Regards,
Hartmut Fehling
Hamburg-Mannheimer Versicherungs-AG
|
|
